Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/321793DE491311F08923AC8FDAE4EC9C.roa
File: 321793DE491311F08923AC8FDAE4EC9C.roa (raw, json)
Hash identifier: rQsIXWRl4o+bPUMg9gIrlZPpo6IZaM3/rb1mFdZkktA=
Subject key identifier: 2B:7A:8A:4E:EA:A9:38:7B:E5:03:03:2D:7E:08:1D:FC:1B:56:96:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/321793DE491311F08923AC8FDAE4EC9C.roa
Signing time: Sat 14 Jun 2025 11:32:05 +0000
ROA not before: Sat 14 Jun 2025 11:31:59 +0000
ROA not after: Fri 04 Jul 2025 11:31:59 +0000
asID: 398993
IP address blocks: 156.236.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 11:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89129 (0x15c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 11:31:59 2025 GMT
Not After : Jul 4 11:31:59 2025 GMT
Subject: CN=684d5db4-62e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:b0:8b:59:88:91:96:7c:1d:a0:0f:cd:05:
a9:21:06:f2:b9:12:93:31:9d:d1:b8:bf:38:c8:d9:
e4:4c:42:83:03:48:d2:8e:25:b2:29:fb:1a:06:d7:
07:9d:a5:41:76:ee:f5:f7:68:95:fe:54:41:c7:48:
0d:cc:c7:0b:53:b2:f0:bb:6d:0c:5e:84:62:eb:73:
af:db:71:26:24:38:06:8b:17:67:f5:66:cf:82:47:
39:23:6b:ee:4b:8d:fe:14:e6:1a:dc:3f:be:51:81:
12:2c:c3:db:fe:8f:19:11:ec:64:e5:8e:10:79:8f:
52:70:86:94:55:f7:e2:bf:ec:59:51:95:ed:ca:9b:
b6:7e:32:c7:45:db:f0:bf:92:92:62:31:2d:15:33:
55:ad:94:33:4d:6f:fd:04:41:98:27:23:34:1b:df:
d2:ae:f4:0e:47:38:d2:b4:60:5f:72:eb:08:fb:2c:
bc:2b:39:49:50:a4:59:14:fb:a8:36:f2:50:09:fa:
5b:42:24:1c:79:23:26:c5:10:79:03:c3:8c:6d:03:
b4:1e:f6:e9:49:8d:ad:75:18:67:4f:cc:07:2a:44:
88:80:9a:74:44:3b:b4:46:a0:db:10:8b:94:f1:a8:
4d:4a:2f:1c:1f:90:4a:5c:bf:ff:90:ea:70:50:ad:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7A:8A:4E:EA:A9:38:7B:E5:03:03:2D:7E:08:1D:FC:1B:56:96:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/321793DE491311F08923AC8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
04:e0:1f:17:a0:b1:ae:32:b6:46:7e:35:03:fe:4a:c9:83:0f:
e9:34:42:e9:da:3a:76:a6:7f:7f:34:54:09:07:17:c9:60:83:
3d:75:fd:fc:23:5f:ff:e3:80:f8:54:a9:4b:d7:bb:4c:bf:a2:
5e:74:79:36:9e:cc:e1:67:0b:7a:43:94:b8:13:a9:25:9e:e9:
f9:8e:9e:ef:b5:51:0c:ac:1f:1d:00:f3:5c:8f:6d:f1:76:e7:
bf:5e:85:7b:39:a7:3c:87:a2:84:6d:f1:de:19:0a:db:45:ee:
17:53:1b:26:8a:c3:69:3e:a1:a3:a9:95:40:3d:12:5f:c8:59:
45:9a:6b:83:04:db:7d:fe:79:aa:2e:1d:ba:9a:6d:69:9c:4e:
86:03:5f:72:b7:7d:f2:31:88:ce:d0:b5:30:4a:92:6c:33:db:
ce:9a:73:32:4b:1b:3f:c1:f0:96:a5:8f:7a:fe:c4:bf:47:42:
b4:af:a9:89:43:e6:d5:b2:de:f6:62:e4:6a:92:34:d7:eb:85:
7b:43:b9:a6:46:b2:e2:ea:2b:17:ea:df:0f:82:b2:f2:6e:54:
58:91:7b:57:64:63:b3:df:c4:16:3d:72:ab:22:ca:a9:60:d0:
d9:ee:95:02:f1:81:c1:e0:e8:db:97:6d:15:28:80:d6:27:42:
1b:87:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:34:26 2025 by rpki-client